Kerja Sepenuh Masa, AVP, Infrastructure Security di Great Eastern Federal Territory - Maukerja

About the Job

The AVP, Infrastructure Security will lead the Infrastructure Security team and be accountable for strengthening the security, compliance, and resilience of the organisation’s IT infrastructure. The role provides leadership, subject-matter expertise, and governance oversight across vulnerability management, patch management, security baseline reviews, firewall rule reviews, and PCI DSS compliance. The individual will work closely with IT custodians, Risk and Compliance, and other stakeholders to drive effective control implementation, timely risk remediation, and continuous improvement across on-premises, and cloud platforms.

• Lead, develop, and manage the Infrastructure Security team, providing clear direction, prioritisation, coaching, and oversight of day-to-day activities.
• Establish, maintain, and periodically review standard operating procedures (SOPs), governance processes, and control documentation for business-as-usual (BAU) infrastructure security management.
• Lead the vulnerability management programme, including network vulnerability assessments, risk-based triage, remediation tracking, escalation, and management reporting.
• Oversee patch management governance and performance, including patching requirements, remediation timelines, exceptions, risk acceptance, and follow-up with IT custodians.
• Lead periodic security baseline reviews for infrastructure platforms and technologies, ensuring standards remain current and identified gaps are tracked to closure.
• Oversee periodic firewall rule reviews, ensuring rules remain necessary, appropriately approved, compliant with security standards, and aligned with the organisation’s risk tolerance.
• Drive PCI DSS compliance for infrastructure security, including control implementation, evidence readiness, gap remediation, and coordination with relevant stakeholders and assessors.
• Ensure security policies, standards, and baseline requirements are consistently implemented across on-premises, and cloud platforms.
• Provide effective governance over infrastructure security findings, exceptions, and remediation plans, with timely escalation of material risks and overdue actions.
• Drive continuous improvement and automation of infrastructure security processes, controls, reporting, and management information.
• Prepare and present infrastructure security risk, compliance, remediation, and KPI updates to management and relevant governance forums.

We are looking for people with

• Bachelor’s degree in Information Security, Computer Science, or related field.
• At least 10 years of IT security experience, including substantial experience in infrastructure security within the financial services industry and demonstrated experience leading a technical security team.
• Professional cybersecurity certifications such as CISSP, CISM, CISA, or CCSP are preferred.
• Strong knowledge of vulnerability management, patch management, security configuration baselines, as well as infrastructure technologies and security controls.
• Strong experience with PCI DSS 4.0 compliance and financial industry regulatory requirements, including control implementation, evidence management, and remediation governance.
• Strong stakeholder management, leadership, communication, and problem-solving skills, with the ability to translate technical risks into clear business and management actions.

How you succeed

• Champion and embody our Core Values in everyday tasks and interactions.
• Demonstrate high level of integrity and accountability.
• Take initiative to drive improvements and embrace change.
• Take accountability of business and regulatory compliance risks, implementing measures to mitigate them effectively.
• Keep abreast with industry trends, regulatory compliance, and emerging threats and technologies to understand and highlight potential concerns/ risks to safeguard our company proactively.

Who we are Founded in 1908, Great Eastern is a well-established market leader and trusted brand in Singapore and Malaysia. With over S$100 billion in assets and more than 16 million policyholders, including 12.5 million from government schemes, it provides insurance solutions to customers through three successful distribution channels – a tied agency force, bancassurance, and financial advisory firm Great Eastern Financial Advisers. The Group also operates in Indonesia and Brunei. The Great Eastern Life Assurance Company Limited and Great Eastern General Insurance Limited have been assigned the financial strength and counterparty credit ratings of "AA-" by S&P Global Ratings since 2010, one of the highest among Asian life insurance companies. Great Eastern's asset management subsidiary, Lion Global Investors Limited, is one of the leading asset management companies in Southeast Asia. Great Eastern is a subsidiary of OCBC, the longest established Singapore bank, formed in 1932. It is the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s and AA- by both Fitch and S&P. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker.

To all recruitment agencies: Great Eastern does not accept unsolicited agency resumes. Please do not forward resumes to our email or our employees. We will not be responsible for any fees related to unsolicited resumes.